6001832efcbd72550f2260533a2da63a28265979af180b60d80cfbbf917d99f6

Resubmissions

02/11/2026, 16:13

261102-tpbw7sbt8x8

02/11/2026, 16:10

261102-tmp12sdv9k8

02/11/2026, 16:00

261102-tf1h7sdv4m8

Analysis

user interaction
yes
max time kernel
149s
max time network
143s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
02/11/2026, 16:10

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
nXXPIyXR.html
Size 3KB
Sample261102-tmp12sdv9k
SHA256 6001832efcbd72550f2260533a2da63a28265979af180b60d80cfbbf917d99f6
MD5 bee2ecad568cca3bbba7dcb9f3ced48b
SHA1 927852d4fc04ce2952187f54179d0f651be57179
SHA512 b759f1f046960c2c9bc20b1f874fadaf76ec9caa7321fcb0bcaf5ffe7b7a7828a84ca4b7d3a0030c08aa20966fe2394fc071b5b1b5de0ae938043b8a2b96ca1b
TLSH
T1656142038840C8279165A3347AD2F508CA68D183D35DADA9B29E119E5AC7FA1C7F72F5
MD5 SHA1 SHA512 TLSH

Score

3^/10

discovery

Malware Config

Signatures

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4148	msedge.exe
3004	chrome.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-524788801-3318743092-4051225893-1000\{8B94EF1C-89B3-43C3-9C21-2112C594AF0B}	msedge.exe

Suspicious behavior: EnumeratesProcesses 8 IoCs

pid	Process
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
2480	msedge.exe
2480	msedge.exe
2000	chrome.exe
2000	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
2832	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe
Token: SeShutdownPrivilege	4404	chrome.exe
Token: SeCreatePagefilePrivilege	4404	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
2832	msedge.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe
4404	chrome.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 2832 wrote to memory of 884	2832	msedge.exe	85
PID 2832 wrote to memory of 3948	2832	msedge.exe	86
PID 2832 wrote to memory of 4148	2832	msedge.exe	87
PID 2832 wrote to memory of 3948	2832	msedge.exe	86
PID 2832 wrote to memory of 3948	2832	msedge.exe	86
PID 2832 wrote to memory of 4312	2832	msedge.exe	88
PID 2832 wrote to memory of 4312	2832	msedge.exe	88
PID 2832 wrote to memory of 3016	2832	msedge.exe	90
PID 2832 wrote to memory of 3680	2832	msedge.exe	91
PID 2832 wrote to memory of 3016	2832	msedge.exe	90
PID 2832 wrote to memory of 3016	2832	msedge.exe	90
PID 2832 wrote to memory of 3680	2832	msedge.exe	91
PID 2832 wrote to memory of 3680	2832	msedge.exe	91
PID 2832 wrote to memory of 1688	2832	msedge.exe	92
PID 2832 wrote to memory of 4936	2832	msedge.exe	93
PID 2832 wrote to memory of 1688	2832	msedge.exe	92
PID 2832 wrote to memory of 1688	2832	msedge.exe	92
PID 2832 wrote to memory of 4936	2832	msedge.exe	93
PID 2832 wrote to memory of 4936	2832	msedge.exe	93
PID 4404 wrote to memory of 3924	4404	chrome.exe	98
PID 4404 wrote to memory of 3004	4404	chrome.exe	100
PID 4404 wrote to memory of 3524	4404	chrome.exe	101
PID 4404 wrote to memory of 3524	4404	chrome.exe	101
PID 4404 wrote to memory of 4956	4404	chrome.exe	103
PID 4404 wrote to memory of 4956	4404	chrome.exe	103
PID 4404 wrote to memory of 4408	4404	chrome.exe	105
PID 4404 wrote to memory of 4408	4404	chrome.exe	105
PID 4404 wrote to memory of 4352	4404	chrome.exe	104
PID 4404 wrote to memory of 4352	4404	chrome.exe	104
PID 4404 wrote to memory of 4356	4404	chrome.exe	106
PID 4404 wrote to memory of 4356	4404	chrome.exe	106
PID 2832 wrote to memory of 4372	2832	msedge.exe	108
PID 2832 wrote to memory of 2188	2832	msedge.exe	107
PID 2832 wrote to memory of 4372	2832	msedge.exe	108
PID 2832 wrote to memory of 2188	2832	msedge.exe	107
PID 2832 wrote to memory of 2436	2832	msedge.exe	112
PID 4404 wrote to memory of 1200	4404	chrome.exe	113
PID 2832 wrote to memory of 6120	2832	msedge.exe	124
PID 2832 wrote to memory of 6128	2832	msedge.exe	125
PID 2832 wrote to memory of 6136	2832	msedge.exe	126
PID 4404 wrote to memory of 5196	4404	chrome.exe	127
PID 4404 wrote to memory of 4680	4404	chrome.exe	128
PID 4404 wrote to memory of 5456	4404	chrome.exe	129
PID 2832 wrote to memory of 5908	2832	msedge.exe	131
PID 2832 wrote to memory of 5908	2832	msedge.exe	131
PID 2832 wrote to memory of 2480	2832	msedge.exe	132
PID 4404 wrote to memory of 2000	4404	chrome.exe	133

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\nXXPIyXR.html
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2832
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x2b4,0x7ff84068c188,0x7ff84068c194,0x7ff84068c1a0
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1912,i,8066245411185172638,16302579662271928790,262144 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
  2⤵
  PID:3948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2024,i,18127088391975040684,4098330763044383956,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=2380 /prefetch:3
  2⤵
  - System Time Discovery
  PID:4148
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,14873610158085406594,14887221967510013059,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=2732 /prefetch:8
  2⤵
  PID:4312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3428,i,12678221353009677223,12326491380951537408,2097152 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=3496 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3424,i,9672737314425379562,14654240109427819610,2097152 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4212,i,4101379799611569480,7862763413864690359,2097152 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:1
  2⤵
  PID:1688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4224,i,16292983663035711460,1634138729309570905,2097152 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
  2⤵
  PID:4936
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,2981515781580053446,17342388739959873243,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
  2⤵
  PID:2188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3656,i,14713987154220880586,16472807841704556154,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:8
  2⤵
  PID:4372
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,433606083354956451,16047156376140909365,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5888,i,433606083354956451,16047156376140909365,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5108,i,8144503553650784609,9563351113001568427,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:8
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,10627476647919023063,13667263148236639663,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=4536 /prefetch:8
  2⤵
  PID:6128
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,15274618820198089130,11083562309525343260,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=4224 /prefetch:8
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5340,i,15454405637530627982,5675010898488630496,524288 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:5908
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5688,i,11003596320842439063,16945475476955859400,262144 --field-trial-handle=2276,i,15066320007146752985,8561723097309380262,262144 --variations-seed-version --mojo-platform-channel-handle=748 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2480

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4292

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ff83e0ac728,0x7ff83e0ac734,0x7ff83e0ac740
  2⤵
  PID:3924
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1940,i,5688140892724618245,13764977010576931341,524288 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2200 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,1398033824128562220,3045609406111959975,262144 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  PID:3524
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2416,i,4305172717380577425,7627592851018502916,524288 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=2428 /prefetch:8
  2⤵
  PID:4956
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3200,i,3651240238700601568,12781566732573812515,2097152 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3244 /prefetch:1
  2⤵
  PID:4352
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3184,i,3010118042471661576,655316347857655448,2097152 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=3188 /prefetch:1
  2⤵
  PID:4408
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4512,i,14655899431752190890,10423220922107847862,2097152 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=4560 /prefetch:1
  2⤵
  PID:4356
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5368,i,6421048222399142337,16411528027896736379,524288 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5372 /prefetch:8
  2⤵
  PID:1200
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5420,i,6023978504898956064,17880760911933462178,524288 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:5196
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5432,i,5478767050187405802,17275426909382080745,524288 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:4680
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5424,i,1042106016513568495,4835032449180999502,524288 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5692 /prefetch:8
  2⤵
  PID:5456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5692,i,13028592122023234916,12152101965499512493,262144 --field-trial-handle=1948,i,1879908735264071652,12629228305767308454,262144 --variations-seed-version=20260911-010032.103000-production --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2000

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3760

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:5284

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

565245ee-1c27-415f-88a9-8efe2c3bfedb.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\565245ee-1c27-415f-88a9-8efe2c3bfedb.tmp
Size 270KB
SHA256 bca4a70b9fcb522b9c925ddd8ee47dd3f604b3be6ae67064f4df599cd194efac
MD5 35afec197dda81d62bcd323151f2e9bf
SHA1 38427e05d033e28252a0f3d3d09e02e7b61deb99
SHA512 23d26820e04735e64085cb9fc50471756953bad9a0a38eed9ac5db005b63f698d2cc30207b1c35b0dc0003572a06a6cad1d9c43c0f9d909ffdbedf0fa411cf08
SSDEEP 6144:e7vHWe40m3otUf+8Wp53EX9pxsNTf+hFD+7t56OD9ZfSApprh:K493obX3ETxsRyFSXD9ZfS4P
TLSH
T1564412399AC5DC7B8DFC5247750BF7019EB88ADB9199DA0408A12F4B711EC9E0B73632
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

82b1faf7-0cbe-47d2-ba2f-2801b3db7255.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\82b1faf7-0cbe-47d2-ba2f-2801b3db7255.tmp
Size 269KB
SHA256 14e0519622286f34679845e2183a07d5a55a13d0637f99786271fdf7ab4b4708
MD5 3a2bacbae222ff266d05a00d1d3089fb
SHA1 7e665379d5215878a4622cce5676ab9793dfbeab
SHA512 7a0e15c1076140f2e90b275c8e4327889f035439d93154684eb6951492ae8819037b20f33a1a1e3b6f3bceb13c0161590e2dad8fa12c6a02342b988a8d5daca4
SSDEEP 6144:D/vHWe40m3otUf+8Wp53EX9pxsNTf+hFD+7t56OD9ZfSApprh:D5493obX3ETxsRyFSXD9ZfS4P
TLSH
T1F64422259AC59C7BCEFC5147750BF7019E7849DA929ADA0408A22F8F711FC5E0A73632
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

94ee942c-b1eb-44de-8da8-7051965106c1.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\94ee942c-b1eb-44de-8da8-7051965106c1.tmp
Size 130KB
SHA256 9b6ebbf48571c9b72979378a2990e3ea1dd0c03266b276ca26b8bbd9d115c5cf
MD5 2dd109b345ed3bfee6c80ffe15fce6a0
SHA1 703d2c0b7813b7cfbc32611955de6aa5e5796e21
SHA512 13f8ae3928b216fcf6d31202bbc9773df1e0f5bb7a27bdbb68c69704483072e52d320844207da0dcabbd142d75e6491b8c94b7587e316cecfb97a8f699f5e4cf
SSDEEP 3072:R+lPFz63F8+7t5x0M2XLqD90xWfrz6a9pInCOp+EGFAJ8P+gZ:R+hFD+7t56OD9ZfSApprZ
TLSH
T177D31232AA91C8BBC9FC6541B197A300DE626CED55DE3A09444A5F8EE09FC4C0773A37
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

62da66ba-6132-40eb-a7dd-890b70c6f6e0.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\62da66ba-6132-40eb-a7dd-890b70c6f6e0.tmp
Size 414B
SHA256 63ad9889c909603bf3f85059600ba7f526b154c9449df325a28ff92b15877612
MD5 1653c2a90699016b314fb5ee7e25af46
SHA1 0220677d2e660c112e5efc1aedd3c5a31a8518a3
SHA512 4cc2e9df5c5a9f3bed149d32fa0da67ed4afe3cbf1194abeac097b678ce398bc0b73fdff966be80c63a8f214e6bb6879c2c128201b2f759f77ba1d3a4d0eeb22
TLSH
T120E02BA5C821F87718FD079965640747F75113972B80880B3A3D850C8FB163A858982C
MD5 SHA1 SHA512 TLSH

Submit Download

65ee7573-ee16-469d-9637-612bef3e00d7.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\65ee7573-ee16-469d-9637-612bef3e00d7.tmp
Size 12KB
SHA256 2ab3979e5ba523bc0d77822cdb566737db01e7b4b579e1e534ab149150ca8237
MD5 acba618a577b10f70f315a5a29e161c3
SHA1 417d9442ec61d32a048d964e97248e27b0f99d67
SHA512 9ddf41a5b6c324df220ebcefe46391cb0d72932b3d64e5b23c8daef35ba9ab858adf139963f48444a6710625d95e997d345800e36e7a2fe085dffa022a7cc922
SSDEEP 192:RRCQBkJv73poPRpam9vHsb+WNn9i0fHHkWukwTVyIsnAUgraJ:RRCQ6JbkXFhwA0/HjuVe
TLSH
T1E8428469BD10757B9CD6D62AFA21BB53D3F5202275901E84EAFCCD2C25E75C82217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6e102ff5-ee3f-4e36-83f8-be0cbb647c12.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6e102ff5-ee3f-4e36-83f8-be0cbb647c12.tmp
Size 12KB
SHA256 11ddbb35afda0f61b1d79bb2cc56596a057029eeb9c7739696d3666cabb3935a
MD5 6e6711307082ba1f41c51a4f2d2a1836
SHA1 bfa5ea9a735879031874eecf7dbb88537226cffc
SHA512 1ce04d1ac83e1f51379b3863e68ae3e48da05fe18f9f5e8f40ad3f605d2d3642d585ba95c4e770389048445ccb5c5b71d21da72620ea1ca0dc21e2958408d8c8
SSDEEP 192:RRCQbkJv73pAPRp2m9vHsb+WNn9i0EHHkWukw3VyIsnAUgraJ:RRCQgJbUXphwA0OHjuxe
TLSH
T11242946DBD14757B9CDBD62AEA217B53E3F5202274901E84EAFCCD2C25E75C82227007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7aec0df3-5155-43c5-9b40-82432e37c7fd.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\7aec0df3-5155-43c5-9b40-82432e37c7fd.tmp
Size 11KB
SHA256 fec55d51340dc684eb41923e08b9363ba5d38c6451317fb0199363baeab2742a
MD5 062608a331cb2fa7e029e6b48c85c3ba
SHA1 fad3182480c2fdc1b8a2eaf0928bfabf3bbe8fb0
SHA512 afa0388812a65dfc479837789c0e8b00cf37ed91bd878086c996bc0be81080434679f2389ff4533fb10c1f471100c53088fd986248cf230b7ca9dbedf26c7a01
SSDEEP 192:RRCQbkIv73pAPRp2m9vHsb+WNn9i0uHHkWukw2VyIsnAUgtaJ:RRCQgUbUXphwA0AHjuu8
TLSH
T12B42832DBD14757B9CDBD22AEA217B53D3F6202674942E84EAFCCD2C25E75C82227407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9085fe87-55e9-4b77-b782-3f9505259222.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\9085fe87-55e9-4b77-b782-3f9505259222.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

c702168e-e856-40fc-8bc0-f3a91d6f1f16.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\c702168e-e856-40fc-8bc0-f3a91d6f1f16.tmp
Size 2KB
SHA256 00021c8fed533f2bf292d22dbc9dd947e33d660cfa8cff7fccd8c762a8996756
MD5 e6b97f2cb5feb372e03d8073207d40af
SHA1 40f4c61a49e13ea9e0ebdb451e443c8b73dc52f9
SHA512 bfbafdbe24b31035a8fdd07ba2583dfeb39a6645730eac360357d4ccbf856c4b64678c3460fdfd355896015d14ab0d70ca1ee629b4eeade52fcf962b8a2f1c74
TLSH
T1554188F7D3E48A7D851156F4DB216E1FCE390A29021C3C6289E8EE4B53E2872D21138E
MD5 SHA1 SHA512 TLSH

Submit Download

f0be1ae7-5f55-4dba-add5-77bffef6199e.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\f0be1ae7-5f55-4dba-add5-77bffef6199e.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

e652ee32-2bf4-4d39-9444-54cc154fb542.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\e652ee32-2bf4-4d39-9444-54cc154fb542.tmp
Size 12KB
SHA256 40a96d2c14a8062d8051159e242dc961c3969b6271b8f126c5aa20dcecfc2c7a
MD5 70934e4b7822d16bc0036f8430efff97
SHA1 b972e1707fc9a748ccb21a0588b5880f975d3a1f
SHA512 ea3d0e2751d1e34598191bf71907b95e69eb189fe523a72fdd3eb63b4a892d48bfd9adf564b135d994eac8bd03cedb92cead1a0965f662128fcf5f0f4c16aed1
SSDEEP 192:RRCQbkJv73poPRpam9vHsb+WNn9i0fHHkWukwTVyIsnAUgraJ:RRCQgJbkXFhwA0/HjuVe
TLSH
T19542846DBD10757B9CD6D62AFA21BB53E3F5202275901E84EAFCCD2C25E75C82217017
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffd8392b-602c-4233-8a7e-d3e6a05019c8.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\ffd8392b-602c-4233-8a7e-d3e6a05019c8.tmp
Size 13KB
SHA256 eff4472df129bc4e2b803cc39a1ba520374d3b607d22cd6393104a3be124b9c2
MD5 8607790a422ecb522e4c0dbd3b269b34
SHA1 e5c7ec8f685c74ebdd01a67f0e763209d8676d75
SHA512 27cdf461b3cdb01cf1d4a2f802f426248ba3f5fe8ed4c31dd046a71cdb0f38b25a10db78f318bacc40577b31c54a1cd046ec06e134194cc0934ab8961d501a55
SSDEEP 384:ftjDu7KxkXqKf/pUZNCgVLH2HfgslHEXODDK+ErU3gbHGVQoiTCGY:ftDu7KxkXqKf/pUZNCgVLH2HfgsdWOHH
TLSH
T120521927A88C9A7F0FD4D98DDC176F4FACF501576568486852FB9C0803A6BCA114E2FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

8468829d-80a2-4cca-b6f9-41859c836c80.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\component_crx_cache\8468829d-80a2-4cca-b6f9-41859c836c80.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

fee818f2-9210-47fd-baf9-ab7258a1ae7f.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\fee818f2-9210-47fd-baf9-ab7258a1ae7f.tmp
Size 269KB
SHA256 afbb8e5fe51e7b2fbfbe9c315a282ac3200789c5c48f912d7b8826bf068c2a6f
MD5 5b91c170afbe280bd444ec310165b69f
SHA1 41568b89be52b751ac4d94ff2ff6f59e44888907
SHA512 dbd7511e30dd5dd08710ce290d4f4cca7c643c77cb42269456c07e7d22cdaff4c1a924e7f757689cc7ab69726f7e14bd2452e88cb12cf3eab9d04c3e224335c5
SSDEEP 6144:Y/vHWe40m3otUf+8Wp53EX9pxsNTf+hFD+7t56OD9ZfSApprh:Y5493obX3ETxsRyFSXD9ZfS4P
TLSH
T1694422259AC59C7BCEFC5147750BF7019E7849DA929ADA0408A22F8F711FC5E0A73632
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27293cd4-fd55-44a3-8461-04c99d749cb6.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\27293cd4-fd55-44a3-8461-04c99d749cb6.tmp
Size 8KB
SHA256 d00211e7aed2edbf9c52760b7a2b333d56193c3964a54c464016f0b44921ad96
MD5 78c8634d7ba9ca48a253cf74546fd5b1
SHA1 b225b1b1a3026c3aa6515a0e1d3314a9660ef216
SHA512 d145e877d7ee4ccd07194c9afb1aa816c63bbbd28313f8ba613547401054ab2172d918c853fb2ae0b70d2b72b9afb5143f037c55ed1df4c9fad0b5af6a14cee7
SSDEEP 192:HONY6y8QmiUyoGbOCTVgVHDR0p+L9ERc3UJiqcLU6:HONY6PmbOCTVKjGYmLJ+U6
TLSH
T12D121A72B8686C7B5DE3A501F48732139FE48167DA492F80D5EC1F1C01EF6AC234B92A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

31a20251-1c6d-4faa-b61e-916cfe523c39.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\31a20251-1c6d-4faa-b61e-916cfe523c39.tmp
Size 18KB
SHA256 5c6e39de7a2118fc395c4f16c0c942da01ff4217d67e712de52e47b481147afd
MD5 39ccc0cf13511c5d367a16adc201ea67
SHA1 311c6e786ef52687d0d44b0555540ec1bc82b1e5
SHA512 b8b5281085e1d65c3d28309af8b18c7bd46909dd2cbd44e12a1101dd6e6cbf822caaa1868c7339fb44233166f63eaf97451cc413b3c4c6a88b916f85047b62bc
SSDEEP 384:2QkUSvjsNNrwCGNZOjTVKjGYm8J+H7vBEet6IIlW:WjdUnJ8AH75EA6Lk
TLSH
T11C827C71A8686D7B49F3A100E64A3613EFB4D15BDAD41F80E9DD5F2C01CA6DD230BD2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c904cde2439d0f658b6928376273908e18874923ffb5ab0253d91ef97d247274
MD5 71592819d06ab9dfd94505cef3db0b85
SHA1 fa4c610ce7419e5f934db322abc11ec563259b9b
SHA512 f0dccb656458e10495c6728811a1fad970a69f8abb5ce8e9bcba9e93f496cd66fb3ce8ce1065b946203d7912789774c609787e85dd5139479b2562b6f05cfae0
TLSH
T16BD002F8BB950515C5C970F7713BDB8143B6EB218246265D64F21E082D747B23606895
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ad9341a3ad2b263d2be4ffd8a97b10f49a2c167d02a5b66182496dee5e8cf827
MD5 8f79499bd1d234dc030ef99e2f850e0e
SHA1 4dd7c44b8570ce93f3db7df7fe1188f189fa82fa
SHA512 d06aa3eb27c999ba47fce9a170740591ef6bacf188a5d364ad9a567936919e24290b5c0c3a8ad16cae1e37c71c2364d9db3ba42e5914a96b0f1f732c29ff5945
TLSH
T199D022F83BC00800C8C830F3303ACB8003B2EB208202230E20F20E080C303F23202880
MD5 SHA1 SHA512 TLSH

Submit Download

06823e46-70ed-41ea-a59a-8ed0f048c608.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\06823e46-70ed-41ea-a59a-8ed0f048c608.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

08bbbed6-fbf4-42b3-8101-e94618308a0e.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\08bbbed6-fbf4-42b3-8101-e94618308a0e.tmp
Size 9KB
SHA256 215fc0c30676d537ceff2d8c8eb2d8d65de7413abb260c03580f3907d5340d6f
MD5 d3ead251e8f079364fa360c0232567e5
SHA1 d0f1529d8346b1f71878cfee954244120c1a08eb
SHA512 09a01366c2b5ad5925699e8cd7613bbb567d09f99ad7bec70684f2ff45dc5985f9fc6eecd2bc671910c14a79abd013a18824afa490bd55ec42300ac56158ffdf
SSDEEP 192:sxZyRkWA/fYszxIdpdKHW6+WNGYRPnPtQIgrJ:sxZyNA/fYsz68HbGmK9
TLSH
T17422A6526E28A57B8CC7E21DBB25BF13D6F95032A1D51E48EAFC861C05E6ADD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

322b8397-fe0e-4e46-baf3-7a6277a4b906.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\322b8397-fe0e-4e46-baf3-7a6277a4b906.tmp
Size 10KB
SHA256 09d70c35e5ebc84dbc0ca8f65bb152a70e84d98db099cb86660a892e2518a892
MD5 9e28c95c9d29c593f1e703ca54e48211
SHA1 ae9f700d3d664c7a1b84686b9e2566e566660f27
SHA512 c1b82e33f56222a1fd5ff65361a0abf0e0c5b2bf0c03ad6ea258713444aa2c889bb41927d5be8d1c8d77d5aef5119f6c8c85cf2fdf67025608a6e455fd56f70e
SSDEEP 192:sxZyRkWA/fYstxIdpdKHW6+WNGYRPSxtQIg5JJ:sxZyNA/fYst68HbGmvV
TLSH
T14A22C8526E28A97B8CC7E21DBB25BF03D6F9503250951E48AAFCCA1C05E76CD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3a4021d9-2e51-4610-9aec-dbb2c7bbf1dc.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\3a4021d9-2e51-4610-9aec-dbb2c7bbf1dc.tmp
Size 27KB
SHA256 8e29072d54751a4e7fbc24fe954b901dff44c15017a43ea00c42362282cddf4f
MD5 3b660f158360e49478c8b8d496aaa8ab
SHA1 77fd59f8753b76bcae0996e679c58b745721b4ff
SHA512 5c4f21e543aed69aebec3271c26f7e2c4d149939d2d95e2866cab9751c4176efe19c3d10323b210622597d6616adc6cfdff57dc54452564b778740bb72706d99
SSDEEP 768:gqK9uzYWvcQWs8F1+UoAYDCx9Tuqh0VfUC9xbog/OVpHLlh7k3nroS+Va:gqK9uzYWvcQWsu1ja0HL7Q30S+Va
TLSH
T18EC2F93F640CCB7E5FC01A9DDC5A6F9B2E9802D7A6588D4047FA984C02C77EE52264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

7fef7b46-a19b-4636-9e86-9e19a86ee669.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\7fef7b46-a19b-4636-9e86-9e19a86ee669.tmp
Size 10KB
SHA256 703fd022a56a964e849a5550d626f9f16b2b0d08e152301961a69434355fb0ca
MD5 8ef43eed9cda0ec25c4875c355c2c9e1
SHA1 fc2322b791ccf6343f82135e042195456801a024
SHA512 1cd38787bec31571fcc6f05c01faeaaebeff308f489cd4b1ec1d36a1481f464a739f6cade25a561134195a8d9e497fb7946f827becac5e9e08575007c5b97caa
SSDEEP 192:sxZyRkWA/fYstxIdpHKHW6+WNGYRPa4WtQIg5JJ:sxZyNA/fYst6qHbGm1V
TLSH
T17F22C8526E28A97B8CC7E21DBB25BF13E6F9503250941E48AAFCCA1C05E7ADD130740F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 258d92b24b09d10a99a2c21f36185c3afafcc58099bf1110289fed50e3ffcb19
MD5 ce01131655304d414014208b86d48b41
SHA1 b1d8cb24eb03ba1741ad2c1ad97a0b5da49bcecb
SHA512 06ac5439c4f7103b422b30a3140913f4da7f0d77acac740bf3b300058e3f4652b614a91b8d86c4e6f1a82553301b7aa867ef11c65b3b8fe57074892f746e0045
TLSH
T18A61B74DC5944274FF68047381D221E33D35B69A46F7AFE207A9F9BADB3A364139801C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 04a2a213e5a045a8d64adf7a0eeb7c245fb4bc96da478e32a26eec36566bb6d4
MD5 7e0b09660b655923e68b7200d1febfcd
SHA1 a3b2682705b422a286f7261f731acbc8ec79eef6
SHA512 5567675c815c727a6dfdb659efd9cea72fdcd24d962d2beaee02664ef89e0402a35a57dc5eb36300d91caf22faadfa3d2c356fdda852a74b35c3e65393fcbacf
TLSH
T11A61A64DC5944274FF68047381D221E33D35B68A46F7AFE207A9F9BADB3A364139801C
MD5 SHA1 SHA512 TLSH

Submit Download

81c09cc6-708c-4dab-8120-96086fbf51fe.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\81c09cc6-708c-4dab-8120-96086fbf51fe.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

aace921c-4c9d-46ff-9409-6cd6eca03298.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\aace921c-4c9d-46ff-9409-6cd6eca03298.tmp
Size 949B
SHA256 0b0371804cdd679465d5ad81cc274f3d9fd5bbb09fab00de5d8f841463aeb2f3
MD5 4c001580d145c1f1b5c33f99092ec3bc
SHA1 175a0bf08eab6359996f716524141de39a940667
SHA512 c5f9f38e9e45c1910e6b4d115d23dbaffbfb5089af61369659ec1fe2581a242ee176d0e0d4ba8daf6bec9105b00507287169b0d1c2e7e6edd53bd6974e36d11f
TLSH
T1FA117DF3C3D595AE8D1516F05A24AE2BCE2D0506422C7C19C9D4EF2797E30B5E10259F
MD5 SHA1 SHA512 TLSH

Submit Download

c85e30be-a3a6-4fc0-824b-b780a922aa11.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\c85e30be-a3a6-4fc0-824b-b780a922aa11.tmp
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

c5628dc8-60c7-4344-b247-d13654f182b9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\c5628dc8-60c7-4344-b247-d13654f182b9.tmp
Size 9KB
SHA256 0b52941367647db225f860c9715a1f281b50592085ddc1b55fbd1156e2fe106b
MD5 a38ec8d430a4b3bb6a9aa3162ef81950
SHA1 ff08f0f2c0eb53ccd28cd97cf23dc874c96ddfc3
SHA512 ad51f976b801ffe7a4c40750536d804e1bb2c9f63c098591169ea61cddc105ceea95d877544ab9938a96df6919e57e0d2d30413721f1d40d0d6704f58f2bf6d4
SSDEEP 192:sxZyRkWA/fYslxIdpdKHW6+WNGYRPnPtQIg5rJ:sxZyNA/fYsl68HbGmKj
TLSH
T11B22B752AE28B57B8CC7D21DBB25BF53D6F95032A1941E48EAFC8A1C05E66DD130780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d04d5745-95be-4878-a1a0-b4138654ab27.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\d04d5745-95be-4878-a1a0-b4138654ab27.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b3d1af31-a1e3-455e-852d-4af8c8708eb5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b3d1af31-a1e3-455e-852d-4af8c8708eb5.tmp
Size 21KB
SHA256 bdde338db1f5f30cba6e90a2de65cddbfd95567f8749b57bc08b8f3093362aa7
MD5 f1bcdc2d9e8a60edc5bcca42d96da555
SHA1 8b876db88089d5e5dda329f14c8fdfa9a6209498
SHA512 6fad99205d94b555da177bbae17bbdef090961c22a1e7e1c74f4dc6aa09920775d78d1cdb6c0430925a44578ba9a99537e7466de476759290cf802c66700813d
SSDEEP 384:8iFOQkUSvT4sNX8TUNTUlIlGwCGNZOjTVKjGYm6J+H7vBEet6IIlW:nF+M+wg7UnJ6AH75EA6Lk
TLSH
T1EFA27C729C58AD7B9DB39A00E6493213DFF081A7C9D56B90EADC5E1C00CB2DC234BD25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cb3550a2-c9e4-44b4-aa43-31dab3cf3f4a.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\cb3550a2-c9e4-44b4-aa43-31dab3cf3f4a.tmp
Size 18KB
SHA256 20129ac781995c06ec1c354025d6bbbd3d6630da339a2689c1966ec7ad17a5a6
MD5 417fb698daa4566a0fe1eae605fda298
SHA1 30641ab876d1b504785c0b5765a59cd8f9e2911c
SHA512 68d8492585891e6d51770232183cefd2ad0e30530b71563eafbda32371dcb1e1833163c823321eea8694d8a38a531c910cc915e4d22762c1fc9f79d549b4986a
SSDEEP 384:rQkUSvjsNNGwCGNZOjTVKjGYm8J+H7vBEet6IIlW:ljcUnJ8AH75EA6Lk
TLSH
T14E827C71A8682D7B49F3A100E64A3613EFB4D15BD9D41F80E9DD5F2C01CA6DD234B926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3d2bfb0-33d7-4c98-9669-8e4e39a944a9.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\d3d2bfb0-33d7-4c98-9669-8e4e39a944a9.tmp
Size 8KB
SHA256 54ef17cdf4564f2bbf1a43b132f73ace5ec42894cab69912f7c5e08abe905046
MD5 98d455aa0ddea55936aea78f663aaf56
SHA1 2710c2e801e48787dcbf803237077778190d3b6b
SHA512 5402bebf8d49360982859448640def6b2d1634b2b7293dabe1754a843d4ed82aa6628075c6cfe3f9e20e3408349806ab555cdf97adf80628f6741a917d215727
SSDEEP 192:SONF6ygpQmiUy5GtOCTVgVHDR0pqzP3AU6:SONF6lHdtOCTVKjGWQU6
TLSH
T16402E735AC683CBB9DF3AE06F48B32179FE4116BDA512B84DAE81E1C00D765C2306C36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 41bb00304a3e01ca2bc0171d4c82a241c624e755fc7cfd88e93ccc2df42ad7ae
MD5 ae0afa02b75c6b03020e0025d56d2273
SHA1 a68b5a8df087ff19d121f9d79127dc3d4643eedb
SHA512 e67fcc00cdb9e46946542ee3c1b92500a71834f0d0828ca67449a081b442b99935a32e2831db702fd19459ce57a06fac4f6c3162e7ff7c7722c3c0fc7fdaa4bd
TLSH
T1AD412A49BAF91148B3B76E56AFF6A86D487FBD772E4AD45E10010D4E0633A40C871B37
MD5 SHA1 SHA512 TLSH

Submit Download